Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3134382e3232342e36302e302f32342d3234203d3e20323734313531.roa
File:                     3134382e3232342e36302e302f32342d3234203d3e20323734313531.roa (raw, json)
Hash identifier:          Nlwmaokkw7zOCL4kupDi1RG6xny+/OoreHMzVMNZr+M=
Subject key identifier:   71:30:25:5B:95:25:63:67:4F:59:69:78:6E:DD:20:36:CF:46:91:9B
Certificate issuer:       /CN=4BA24B565BA24009748E46515F9138A6540E41B4
Certificate serial:       4448CC4C50FC29D197F977A566FCFA489ED126A8
Authority key identifier: 4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3134382e3232342e36302e302f32342d3234203d3e20323734313531.roa
Signing time:             Fri 11 Jul 2025 17:20:00 +0000
ROA not before:           Fri 11 Jul 2025 17:15:00 +0000
ROA not after:            Fri 10 Jul 2026 17:20:00 +0000
asID:                     274151
IP address blocks:        148.224.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 01:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:cc:4c:50:fc:29:d1:97:f9:77:a5:66:fc:fa:48:9e:d1:26:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA24B565BA24009748E46515F9138A6540E41B4
        Validity
            Not Before: Jul 11 17:15:00 2025 GMT
            Not After : Jul 10 17:20:00 2026 GMT
        Subject: CN=7130255B952563674F5969786EDD2036CF46919B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:e1:d1:ce:6f:fd:88:ad:36:1f:e4:d5:f2:
                    91:16:be:43:84:62:a0:2f:ad:6c:78:d1:0a:0d:86:
                    d9:13:b0:2d:2e:02:03:76:71:bf:b1:67:15:07:74:
                    0c:2e:e1:e6:77:66:0b:0d:48:5b:03:e5:08:3a:2d:
                    39:c5:92:69:5c:9a:72:58:cc:55:f2:e4:36:d2:a9:
                    2a:e6:d2:a0:3f:40:0d:dd:1b:18:a2:ad:cf:53:f2:
                    46:13:0e:df:d0:25:2f:10:a1:88:91:ff:ce:26:29:
                    b8:94:6a:a7:ad:b1:d0:18:f8:f7:45:04:47:a5:59:
                    65:ad:90:b1:60:da:ac:6d:51:26:5d:7f:5a:52:0d:
                    92:b1:3c:e9:fb:78:ef:9a:9a:1c:34:bc:a6:3c:3b:
                    43:d0:f7:10:c1:ad:e0:85:f8:db:fa:44:d4:77:3d:
                    01:21:5f:84:78:8b:9d:1f:a9:37:d9:b6:29:c8:a3:
                    e2:03:e4:b4:b8:c0:00:9b:83:09:d1:48:58:34:d2:
                    1d:f4:2f:ac:cd:1c:80:6b:d8:3f:d1:42:75:34:bb:
                    6f:2b:40:f9:b1:b5:87:18:4d:7e:9b:25:7d:3c:68:
                    0f:64:f6:d9:a7:eb:87:50:66:fe:3a:b1:55:d7:c2:
                    fb:07:5e:69:66:bd:1c:b9:46:48:ee:2c:fb:bf:78:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:25:5B:95:25:63:67:4F:59:69:78:6E:DD:20:36:CF:46:91:9B
            X509v3 Authority Key Identifier:
                keyid:4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/3134382e3232342e36302e302f32342d3234203d3e20323734313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:21:0c:4b:db:df:62:84:1c:17:e5:91:65:a0:69:9f:3f:
         77:44:3d:f4:af:55:34:a0:9a:2a:50:e5:b5:7c:78:f2:90:21:
         4f:70:3d:8c:4c:a4:dc:35:43:41:1b:c7:25:b8:17:d3:ee:95:
         16:74:5a:97:6b:ab:3e:c1:5d:e7:92:0b:20:e3:16:f8:28:e1:
         ea:bd:20:9b:c1:87:e0:71:57:79:d0:68:36:16:01:8d:73:e9:
         1c:3f:a4:21:f9:d6:e4:2d:0f:15:61:69:ed:64:85:06:fa:38:
         0b:39:52:3a:f6:ec:59:82:40:29:7d:2c:a7:8b:b6:a7:23:00:
         3b:c6:66:ac:72:54:7e:d2:59:e5:10:40:2a:a6:68:02:43:d1:
         2e:1e:cb:fb:dd:d5:29:d8:1e:c2:67:7b:52:9e:e3:39:d2:05:
         3a:43:7b:6c:ab:42:57:c2:f0:c6:db:75:3f:40:47:f1:ea:cc:
         ff:ee:86:98:c4:16:a0:82:e8:33:e3:46:c7:f7:4e:ab:87:8e:
         2e:98:42:1e:cd:4a:7f:90:93:cb:44:15:e5:1b:a8:4f:7a:d0:
         47:73:3c:84:d9:4a:0b:f7:5a:4e:67:2e:73:5a:a2:e7:b5:ff:
         1b:87:a9:fb:80:8f:da:d8:8a:f3:39:12:ef:7a:c6:a3:ed:cf:
         7b:cf:0f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 20:44:29 2025 by rpki-client